CVE-2022-41705

n/a / Badaso PUBLISHED

Description (CNA)

Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.

Affected (CNA)

Vendor / product	Versions
n/a / Badaso	affected 2.6.3

CWE

No CWE identifiers supplied.

References

https://fluidattacks.com/advisories/headhunterz/
https://github.com/uasoft-indonesia/badaso/

ADP enrichment

CVE

No English description supplied.

https://fluidattacks.com/advisories/headhunterz/
https://github.com/uasoft-indonesia/badaso/

CISA-ADP

No English description supplied.

No references supplied.